CVE-2016-1630 in Chrome
Summary
The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/12/2016
Disclosure
03/05/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81156 | Google Chrome Blink access control | 264 | Unproven | Official fix | CVE-2016-1630 |